Privacy Policy

The following information is about the processing of personal data by Berlin Heart GmbH, in particular when using our website. The processing of personal data (e.g., name, address, e-mail address or telephone number of a data subject) is carried out pursuant to the statutory provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

This privacy policy uses terms that are based on the wording of the GDPR. The definitions for some of these terms can be found at the end of this document.

1. Name and Address of the Controller

The controller pursuant to Art. 4, para. 7, GDPR is:

Berlin Heart GmbH
Represented by the Managing Directors Sven-René Friedel, Dr. med. Ares K. Menon
Wiesenweg 10
12247 Berlin
Telefon: +49 30 8187 2600
Fax: +49 30 8187 2601
E-Mail: info@berlinheart.de

2. Data Protection Officer

You may contact our Data Protection Officer as follows:

LOROP GmbH
Landgrafenstraße 16
10787 Berlin
E-Mail: datenschutz@lorop.de

3. Processing of Personal data when visiting our website

When using the website for strictly informational purposes, we only process the personal data that your browser transmits to the server we use. If you wish to view our website, we process the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis: Art. 6, para. 1, subpara. f, GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.

4. Processing of personal data when contacting us personally

When you contact us by e-mail, post, via a contact form or in any other way, the data you provide (e.g., your e-mail address, your name and/or your telephone number) will be processed by us in order to process or respond to your request (legal basis: Art. 6, para. 1,, subpara. a, f, GDPR). We delete the data collected in this context as soon as storage is no longer required, or we restrict processing if there are any statutory retention obligations.

7. Processing of Personal Data when registering a user account

7.1  Protected user areas

Our website offers a protected user area exclusively for certain user groups (clinics, distributors, patients, etc.) in order to provide users with access to further, in particular product-specific information. If you belong to one of these user groups and would like to set up a user account, you must complete the information requested in the registration form and register using a password of your choice.

7.2  Registration

We use a double opt-in procedure for registration, i.e., your registration is not complete until you have confirmed your log-in registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If you do not confirm this within 24 hours, your log-in registration will be automatically deleted from our database.

7.3  Processing of data when using the portal

When you use our portal, we process the data required for the fulfillment of the contract until you ultimately delete your account access. Furthermore, we process the data you voluntarily provide for the duration of your use of the portal, unless you delete it beforehand. You can administrate and change all details in the protected customer area. The mandatory information required for registration is marked separately, any additional information is voluntary. The legal basis for this is Art. 6, para. 1, subpara. b, GDPR, for the voluntarily provided data Art. 9, para. 2, subpara. a, GDPR (for health data), otherwise Art. 6, para. 1, subpara. a, GDPR.

7.4  Encryption

To prevent unauthorized access to your personal data by third parties, the connection is encrypted using TLS technology.

7.5  Account deletion

The account can be deleted independently in the "Account" tab.

13. Recipients of personal data

Personal data will only be transferred to third parties in the cases specified in this declaration or if we expressly inform you of this elsewhere. In addition, we sometimes use external processors (Art. 28, GDPR) to provide our services (e.g., host providers, email providers). However, these process personal data exclusively within the European Union.

14. Profiling, data transfer to third countries

We do not use automated decision-making including profiling within the meaning of the GDPR. Data will only be transferred to third countries in the cases expressly mentioned in this declaration or elsewhere or with the corresponding consent.

15. Your rights

15.1  Rights

With respect to your personal data you have the following rights:

• Right to information,
• Right to rectification and erasure,
• Right to restriction of processing,
• Right to object to the processing,
• Right of revocation if you have consented to the processing,
• Right to data portability.

15.2  Revocation

Consent can be withdrawn at any time with effect for the future and without giving reasons.

15.3  Right of appeal

If you are of the opinion that we are not respecting your rights to the extent owed, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Before you do this, however, we would be pleased if you could inform us of your criticism so that we can remedy the cause of the complaint ourselves.

16. Deletion of data

If the processing purpose no longer applies or if a storage period prescribed by law expires, we will delete the personal data. No action on your part is required for this.

18. Analysis tools

18.1  Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website (see below), your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the controller for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the controller.

18.2  IP address 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

18.3  Storage of cookies

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the all of the functions available on this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

18.4  Shortening of IP addresses

This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, so that they cannot be traced back to individuals.

18.5  Analysis of website usage and statistics

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has joined the EU-US Privacy Shield, see www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6, para. 1, subpara. f, GDPR.

18.6  Information about Google

Information about Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html,overview of data protection: support.google.com/analytics/answer/6004245, and the privacy policy: policies.google.com/privacy.